Credit Freeze vs Fraud Alert: Which Do You Need?

Credit freeze vs fraud alert is a choice between restricting access to your credit file and asking businesses to verify your identity more carefully. A credit freeze offers stronger prevention against new-account fraud, while a fraud alert is lighter, easier to place and useful when you suspect risk but still need creditors to access your report.

Both are free in the United States, but they work differently and neither prevents every form of identity theft. Existing-account fraud, tax fraud, medical identity theft and payment scams require additional responses.

The difference in one minute

A credit freeze limits prospective creditors’ access to your credit report. Because lenders commonly check a report before opening an account, blocking that access makes it harder for an impostor to obtain new credit in your name. You must contact each of the three nationwide credit bureaus to place the freeze.

A fraud alert leaves the report available but tells businesses to take steps to confirm your identity before opening new credit. According to the Federal Trade Commission, you contact one bureau for an alert and that bureau must notify the other two.

Feature	Credit freeze	Initial fraud alert	Extended fraud alert
Effect	Restricts access to the credit file	Tells businesses to verify identity	Adds longer verification protection after identity theft
Where to request	All three nationwide bureaus separately	Any one nationwide bureau	Any one bureau with required identity-theft documentation
Typical duration	Until you remove it	One year; renewable	Seven years under FTC guidance
New credit application	Temporarily lift or remove freeze	Creditor may contact you	Creditor follows enhanced verification steps
Best fit	Strong preventive protection	Possible exposure or short-term concern	Confirmed identity-theft victim

When a credit freeze is the better choice

Choose a freeze when your priority is preventing new-account credit fraud and you do not need your file continuously open. It is appropriate after a data breach involving sensitive identifiers, after identity theft, for a child whose information should not be used for credit, or simply as an ongoing preventive control.

A freeze does not hurt your credit score and does not stop you from using existing credit accounts. It also does not block every organization from accessing a report; existing creditors, certain government agencies, debt collectors and other permitted parties may retain access under applicable law.

• You rarely apply for new credit and want a standing barrier.
• Your Social Security number or equivalent sensitive data may have been exposed.
• A fraudulent application has already appeared.
• You are protecting a minor or an adult who cannot manage their own file.
• You are comfortable lifting the freeze before legitimate applications.

When a fraud alert makes sense

A fraud alert is useful when you want an extra identity check without closing normal access to the report. For example, you may have lost a wallet, received a suspicious breach notice or seen a phishing attempt but have no confirmed misuse. It can also help during a period when you expect lenders or landlords to check your file.

The limitation is important: an alert asks a business to verify, but it does not technically block access. Procedures vary, and a determined fraudster may exploit weak verification. If you want the strongest available restriction on new credit checks, a freeze is usually the clearer tool.

How to place a credit freeze

1. Go directly to the official websites of Equifax, Experian and TransUnion. The FTC’s page links to all three. Avoid search ads and third-party services that charge for a free legal right.
2. Create or use each bureau’s account and complete identity verification. Use a unique password and multifactor authentication where offered.
3. Place the freeze at all three bureaus. Freezing only one leaves the others available to lenders that check a different report.
4. Save confirmation details in a secure password manager or offline record. Do not keep recovery information in an unprotected email draft.
5. Check that each bureau shows the file as frozen. Record the date.
6. Before legitimate credit shopping, ask the lender which bureau it uses or schedule a temporary lift at all three for a narrow time window.

A freeze should be free to place, lift and remove. Type bureau addresses directly or follow links from the FTC; identity thieves and lead-generation companies buy advertisements around urgent searches.

How to place a fraud alert

1. Contact any one of the three nationwide bureaus through its official site or phone number.
2. Request an initial alert if you suspect risk. The bureau should notify the other two.
3. Provide a phone number or other contact method lenders can use for verification.
4. Confirm that the alert appears on all three reports.
5. Renew it if the risk continues. If identity theft is confirmed, review eligibility for an extended alert.

Service members can also investigate an active-duty alert. Rules and documentation can change, so use current FTC and bureau instructions rather than an old checklist saved from a previous incident.

What neither option protects

A freeze or alert focuses on new credit opened using your identity. It may not stop someone who already controls your bank login, card number, mobile account or email. It also does not prevent a scam victim from voluntarily sending money, nor does it resolve fraudulent tax returns, employment records or medical claims.

Risk	Freeze or alert helps?	Additional action
New credit card opened in your name	Yes, especially a freeze	Monitor reports and dispute unauthorized inquiries or accounts
Charges on an existing card	Usually no	Lock the card and contact the issuer immediately
Compromised email account	No	Change credentials, revoke sessions and strengthen recovery
Tax identity theft	No direct prevention	Follow the tax authority’s identity-theft process
Phone number takeover	No	Set a carrier account PIN and port-out protection
Payment scam	No	Contact the payment provider and bank promptly; report the fraud

If identity theft has already happened

Act in order. Secure the email account that controls resets, contact affected financial institutions, place a freeze, and report the incident through IdentityTheft.gov for a recovery plan. Review all three credit reports for accounts, addresses and inquiries you do not recognize.

Keep a log of dates, case numbers, names and documents. Send disputes through official channels and retain copies. A police report may be useful or required in some circumstances, but the FTC recovery process explains which documentation applies to the specific type of theft.

How to apply for credit while frozen

A freeze is designed to be reversible. Before applying for a mortgage, loan, card, apartment or some services, temporarily lift it. Ask which bureau will be checked and when, then schedule the smallest practical window. If you cannot learn the bureau, lift all three briefly and refreeze them after the inquiry.

Do this before the application deadline. Identity-verification problems or forgotten account credentials can take time to resolve. Never give a supposed lender your bureau password or freeze-account login.

Common mistakes

• Freezing only one bureau.
• Paying a third party for a freeze or alert.
• Clicking a bureau link in an unexpected message.
• Assuming a freeze monitors existing bank and card transactions.
• Losing recovery credentials and discovering the problem during a loan application.
• Leaving the file unfrozen for months after a single inquiry.
• Ignoring children’s reports or joint accounts after household identity theft.
• Failing to secure email and mobile accounts that receive reset codes.

Decision checklist

• Choose a credit freeze for the strongest control against unauthorized new credit.
• Choose an initial fraud alert for a lower-friction warning when exposure is suspected.
• Use an extended alert if confirmed identity theft and current FTC requirements apply.
• Contact official bureaus directly.
• Monitor existing financial accounts separately.
• Review credit reports for unauthorized activity.
• Protect email, phone and password-manager accounts.
• Document every recovery action.

Frequently asked questions

Can I have both a credit freeze and fraud alert?

They address the same new-credit risk in different ways, and a freeze already restricts access. Follow current bureau and FTC instructions for your situation; after identity theft, the recovery plan may recommend several coordinated protections.

Will a credit freeze lower my score?

No. A freeze controls access to the file; it does not change the account information used to calculate a score.

Does freezing stop prescreened credit offers?

Not necessarily. The FTC provides a separate opt-out process for prescreened offers. Treat unwanted marketing and fraud prevention as related but distinct tasks.

The practical recommendation

For most people who do not need frequent credit checks, a free freeze at all three bureaus is the stronger preventive choice. Use a fraud alert when you need continued access with an added verification signal, or follow the extended-alert process after confirmed identity theft. Whichever you choose, pair it with account monitoring and strong control of email and phone recovery channels.

A lost-wallet scenario

If a wallet containing identification and cards disappears, first lock affected payment cards and secure the email and mobile accounts used for resets. Then decide whether the exposed identifiers justify freezing all three credit files. An initial fraud alert can add verification while you investigate, but it does not create the same access restriction. Review reports and statements over the following months, because misuse may not appear immediately.

If a fraudulent account is found, preserve the notice or report, contact the creditor through an independently verified number, use IdentityTheft.gov to build a recovery plan, and document every case number and response.

Credit-file protection is only one layer of identity security. For related steps, review passkeys and account recovery and safe handling of sensitive documents.